Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/0/3230302e33362e3231382e302f32342d3234203d3e20323731333637.roa
File:                     3230302e33362e3231382e302f32342d3234203d3e20323731333637.roa (raw, json)
Hash identifier:          dHA676dJE1bxU6ZTWx0ea9d396gBPbLfAEIiCdStXjo=
Subject key identifier:   8E:78:65:BF:B7:86:B0:ED:3A:23:02:E9:96:B4:79:4C:36:BA:82:A5
Certificate issuer:       /CN=9CC508BB9684B8837402E71D2AF4DD66B77F6C27
Certificate serial:       4969C8AFCB260181F64856D7D8DDECCF2DD87FCE
Authority key identifier: 9C:C5:08:BB:96:84:B8:83:74:02:E7:1D:2A:F4:DD:66:B7:7F:6C:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9CC508BB9684B8837402E71D2AF4DD66B77F6C27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/0/3230302e33362e3231382e302f32342d3234203d3e20323731333637.roa
Signing time:             Mon 02 May 2022 20:44:11 +0000
ROA not before:           Mon 02 May 2022 20:39:11 +0000
ROA not after:            Mon 01 May 2023 20:44:11 +0000
asID:                     271367
IP address blocks:        200.36.218.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:69:c8:af:cb:26:01:81:f6:48:56:d7:d8:dd:ec:cf:2d:d8:7f:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CC508BB9684B8837402E71D2AF4DD66B77F6C27
        Validity
            Not Before: May  2 20:39:11 2022 GMT
            Not After : May  1 20:44:11 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:46:a2:55:28:e2:fd:d4:90:9d:0b:cf:4d:b7:
                    63:fb:52:d3:0f:3a:66:87:fc:33:4e:35:cc:99:99:
                    7e:2b:bd:f1:0c:96:2d:58:c0:a7:22:d2:b9:17:f1:
                    5e:0b:e9:f4:63:bd:30:da:18:b8:16:f2:e8:eb:3f:
                    0b:93:84:07:f7:8b:f8:84:9b:7d:2f:84:09:d3:1d:
                    d5:6c:3c:2f:ba:f8:ab:af:ab:12:2d:c5:35:42:b3:
                    7c:17:67:12:98:2e:10:f7:8f:ac:d2:39:54:47:a1:
                    a5:ec:75:b2:63:3e:8f:7e:18:dc:be:2b:51:5c:c6:
                    05:32:26:ad:ba:8e:ad:d4:6d:ef:07:1c:b1:e2:3c:
                    45:3c:d5:51:86:24:7d:10:27:bb:91:e5:50:cf:28:
                    e8:a1:1b:61:85:5a:c3:9d:de:91:e6:b6:00:55:dd:
                    93:a5:12:ea:b8:e3:6b:fd:70:15:26:f0:c6:7d:83:
                    49:96:5a:fa:b9:7a:af:33:a9:c9:18:e0:65:46:d0:
                    57:05:73:d6:ce:20:bf:9c:d0:1f:29:4c:c7:b6:07:
                    57:2d:a2:fc:a2:cc:89:dc:d3:91:a6:69:7b:6e:01:
                    55:f4:c0:83:43:af:ef:cc:d9:9b:76:7d:b0:11:32:
                    7b:3b:3b:9b:43:b4:b4:e9:1b:d6:b2:0f:14:51:40:
                    2d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:78:65:BF:B7:86:B0:ED:3A:23:02:E9:96:B4:79:4C:36:BA:82:A5
            X509v3 Authority Key Identifier:
                keyid:9C:C5:08:BB:96:84:B8:83:74:02:E7:1D:2A:F4:DD:66:B7:7F:6C:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/0/9CC508BB9684B8837402E71D2AF4DD66B77F6C27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9CC508BB9684B8837402E71D2AF4DD66B77F6C27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/0/3230302e33362e3231382e302f32342d3234203d3e20323731333637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:7a:3d:12:5b:bf:61:16:3f:80:8b:81:49:8f:fa:3c:bd:5c:
         98:37:c5:d6:a0:39:3d:78:ad:4c:6e:30:f2:18:d4:ad:57:39:
         ea:40:a1:ab:61:65:bd:ac:fe:36:12:1f:51:49:0e:c7:e4:4a:
         e8:4e:80:8b:6f:27:02:37:77:af:6c:8b:64:b4:97:c7:c2:77:
         71:bc:95:8c:fd:3a:60:2a:5d:76:18:eb:39:c1:51:a3:f8:46:
         7b:c5:e0:46:32:bb:07:8e:8c:26:e5:31:ee:a5:6a:80:a3:35:
         90:60:56:a2:36:7c:5e:50:57:2f:6b:a7:e1:d6:99:12:ad:08:
         67:d3:62:9e:7b:65:f9:fb:7d:45:cf:3c:ae:73:5d:b1:db:da:
         8c:cc:cb:99:7a:23:97:16:db:c8:ca:53:19:5f:65:66:74:d6:
         57:45:cb:26:f8:d8:39:11:e7:57:a9:47:5c:80:4a:a9:43:f7:
         87:b5:6c:1f:9e:79:c2:c3:60:89:6c:25:e0:83:36:39:36:1c:
         7a:8d:c3:ca:4d:3d:b0:41:32:88:f3:39:cb:a9:ce:7b:6d:ca:
         1c:3a:3c:2e:70:40:9e:60:54:40:1b:d3:22:47:e5:19:f9:95:
         ce:7b:30:c2:a4:2a:6f:b4:bf:cb:f7:65:22:9a:ca:ad:55:cf:
         eb:32:8c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:28:27 2025 by rpki-client